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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims; 

1 . (Previously Presented) The method of claim 24, wherein using the table 
to control transmission of data packets through the port comprises: 

receiving a second data packet on the port, the second data packet including a 
second source IP address and a second MAC address, the second source IP address and second 
MAC address forming a second source IP address and MAC address pair; 

comparing the second source IP address and MAC address pair with source IP 
address and MAC address pairs stored in the table; and 

passing the second data packet through the port, when the second source IP 
address and MAC address pair is found in the table. 

2. (Canceled) 

3. (Previously Presented) The method of claim 1 further comprising: 
performing a reverse IP check to confirm the learned first source IP address. 

4. (Previously Presented) The method of claim 1 wherein the learning of the 
first source IP address utilizes at least one process selected fi-om the following group of 
processes: (1) using a reverse address resolution protocol; (2) listening to a DHCP response 
packet; (3) watching for a IP header information in a data packet; and (4) listening to ARP 
requests and ARP reply messages. 

5. (Previously Presented) The method of claim 1 wherein the table is stored 
in an access control list of a content addressable memory device. 

6. (Previously Presented) The method of claim 1 flirther comprising: 
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detecting when a device having a third source IP address, which is stored in the 
table, is no longer coupled to the port; and 

removing the third source IP address from the table when the device having the 
third source IP address is determined to no longer be coupled to the port. 

7. (Previously Presented) The method of claim 1 ftirther comprising: 
detecting when a device having the learned first source IP address, which is stored 

in the table, is no longer coupled to the port; and 

removing the learned first source IP address from the table when the device 
having the leamed first source IP address is determined to no longer be coupled to the port. 

8. (Original) The method of claim 1 further comprising receiving input from 
a system administrator which selects a maximum number of source IP addresses which have 
access through a port. 

9. (Original) The method of claim 1 further comprising receiving input from 
a system administrator which selects ports of the plurality of ports, where access though selected 
ports will be provided based on a source IP address and MAC address pair contained in a data 
packet. 

10. (Canceled) 

1 1 . (Previously Presented) The method of claim 1 fiirther comprising: 
receiving a third data packet on the port; and 

blocking the third data packet at the port, if a third source IP address and a third 
MAC address for the third data packet is determined to not be stored in the table, and a 
maximum number of source IP addresses already have access through the port. 

12. (Previously Presented) The method of claim 1 fiirther comprising: 
receiving a third data packet on the port; 
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determining a third source IP address and a third MAC address for the third data 

packet; and 

storing the third source IP address and the third MAC address in the table, if a 
maximum number of source IP addresses has not already been reached for the port, and passing 
the third data packet through the port. 

13. (Previously Presented) The method of claim 12 further comprising 

blocking the third data packet at the port, when the source IP address for the third data packet is 
determined to not be stored in the table, and a maximum number of source IP addresses already 
have access through the port. 

14 - 16. (Canceled) 

17. (Previously Presented) A network device for use in a computer network 
having a plurality of hosts each host having a MAC address, the network device comprising: 
a plurality of ports; 

a MAC detector which operates to identify source MAC addresses for data 
packets received at a first port of the plurality of ports; 

a source IP address detector which operates to identify source IP addresses for 
data packets received at the first port, a source IP address and source MAC address for a given 
data packet forming a source IP address and MAC address pair; and 

a processor which operates to: 

compare a first MAC address for a first data packet received on the first 
port with information in a table configured to store a plurality of source IP address and MAC 
address pairs; 

if the first MAC address is not found in the table, learn a first source IP 
address of the first data packet, wherein the first MAC address and first source IP address form a 
first source IP address and MAC address pair, and wherein said learning is delayed from a time 
of receipt of the first data packet until a predetermined amount of traffic has passed through the 
first port; 
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upon learning, store the first source IP address and MAC address pair in 

the table; 

compare a second source IP address and MAC address pair for a second 
data packet received at the first port with the information in the table; and 

pass the second data packet through the first port when the second source 
IP address and MAC address pair is found in the table. 

18. (Previously Presented) The network device of claim 17 wherein the 
network device includes a content addressable memory and wherein the table is stored in an 
access control Ust of the content addressable memory. 

19. (Canceled) 

20. (Previously Presented) The network device of claim 1 7 wherein the 
processor further operates to block the second data packet at the first port when the second 
source IP address and MAC address pair is not found in the table. 

2 1 . (Previously Presented) The network device of claim 1 7 wherein the 
processor further operates to selectively block access to selected ports of the plurality of ports 
based on a source IP address contained in data packets received at a port. 

22. (Previously Presented) The method of claim 24, wherein using the table 
to control transmission of packets through the port comprises: 

comparing a second source IP address and MAC address pair with source IP 
address and MAC address pairs stored in the table, the second source IP address and MAC 
address pair being determined fi-om a second data packet received at the port; 

if the second source IP address and MAC address pair is found in the table, 
passing the second data packet through the port; and 

if the second source IP address and MAC address pair is not found in the table, 
blocking the second data packet at the port. 
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23. (Currently Amended) The method of claim 22, wherein the network 
device includes a [[s]] timer configured to clear the table of one or more source IP addresses at 
predetermined time intervals. 

24. (Previously Presented) A method for providing port security in a network 
device, the method comprising: 

receiving a first data packet on a port of the network device, the first data packet 
including a first MAC address and a first source IP address; 

determining if the first MAC address is a new MAC address that is not included 
in a table of the network device, the table configured to store a plurality of source IP address and 
MAC address pairs; 

if the first MAC address is a new MAC address, learning the first source IP 
address, wherein the first MAC address and the first source IP address form a first source IP 
address and MAC address pair, and wherein said learning is delayed fi"om a time of receipt of the 
first data packet until a predetermined amount of traffic has passed through the port; 

upon learning, storing the first source IP address and MAC address pair in the 

table; and 

using the table to control transmission of data packets through the port. 

25. (Previously Presented) A network device for use in a computer network 
having a plurality of hosts, each host having a MAC address, the network device comprising: 

a plurality of ports; 

a table configured to store a plurality of source IP address and MAC address 

pairs; and 

a processor configured to: 

receive a data packet on the port, the data packet including a MAC address 
and a source IP address; 

determine if the MAC address is a new MAC address that is not included 

in the table; 
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if the MAC address is a new MAC address, learn the source IP address, 
wherein the MAC address and the source IP address form a source IP address and MAC address 
pair, and wherein said learning is delayed from a time of receipt of the data packet until a 
predetermined amount of traffic has passed through the port; 

upon learning, store the source IP address and MAC address pair in the 

table; and 

use the table to control transmission of data packets through the port. 
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